Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3137362e302f32322d3234203d3e203237393934.roa
File:                     3230302e35392e3137362e302f32322d3234203d3e203237393934.roa (raw, json)
Hash identifier:          UAPHi3rz+TIeAlC72Us5kDaZte2WM5h3xNHARbQvCQk=
Subject key identifier:   2C:A9:A1:83:2D:80:22:C0:0C:66:38:99:C2:96:1C:3C:B6:2B:B0:A3
Certificate issuer:       /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
Certificate serial:       0427E6DCE1C8B98F0D8A52A8DFF7DB837A11AB64
Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3137362e302f32322d3234203d3e203237393934.roa
Signing time:             Mon 11 Aug 2025 13:35:26 +0000
ROA not before:           Mon 11 Aug 2025 13:30:26 +0000
ROA not after:            Mon 10 Aug 2026 13:35:26 +0000
asID:                     27994
IP address blocks:        200.59.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:e6:dc:e1:c8:b9:8f:0d:8a:52:a8:df:f7:db:83:7a:11:ab:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
        Validity
            Not Before: Aug 11 13:30:26 2025 GMT
            Not After : Aug 10 13:35:26 2026 GMT
        Subject: CN=2CA9A1832D8022C00C663899C2961C3CB62BB0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:03:08:ac:03:dd:36:01:e9:75:5a:35:5c:
                    3e:54:9a:fa:4a:e4:e7:e8:1a:1b:45:fc:6b:61:a2:
                    6a:df:be:ae:81:62:89:74:5b:be:d1:34:76:3e:ff:
                    2b:fe:48:4d:57:a4:73:e9:a0:19:00:3e:5e:eb:91:
                    ab:bc:83:e7:84:92:94:4c:f2:35:1f:e3:41:b6:00:
                    0f:96:aa:22:42:16:b5:b1:59:1c:fd:24:cd:c5:1e:
                    ee:b3:4f:08:66:44:ff:ee:90:60:f5:22:c3:b4:68:
                    8a:c0:85:4c:90:fe:31:36:09:20:24:c9:2a:ea:85:
                    7a:c8:c2:b3:37:4e:48:66:9d:c4:20:98:94:a4:ec:
                    3c:b6:f1:c1:8c:5d:d2:a0:27:c4:59:5a:65:7b:02:
                    6b:5c:bc:ca:2a:ee:97:b7:cb:a4:af:a2:b6:23:a1:
                    34:37:b3:e1:6f:00:15:91:c6:6b:b7:6c:91:05:f7:
                    63:9c:05:ba:db:8f:24:1d:03:40:b6:4d:d6:00:01:
                    5b:a1:74:2f:21:54:1d:fa:c9:4e:b3:97:42:c4:78:
                    d4:ef:86:07:7f:7a:34:8b:cb:14:32:08:f0:8d:0c:
                    52:96:c0:92:5f:b3:a4:0c:35:90:06:92:4f:20:4f:
                    d8:e0:45:9b:39:ac:67:ec:c2:7b:e1:08:de:38:df:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A9:A1:83:2D:80:22:C0:0C:66:38:99:C2:96:1C:3C:B6:2B:B0:A3
            X509v3 Authority Key Identifier:
                keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3137362e302f32322d3234203d3e203237393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:54:5b:ae:06:92:a0:99:9a:32:d9:b8:52:c7:53:4a:88:bf:
         f3:04:71:94:3a:a4:ed:c1:a0:54:79:d2:2c:15:ca:e6:6f:19:
         4f:de:8d:c4:55:bb:13:86:2a:00:0d:ec:bc:20:f6:d7:da:67:
         df:4c:8f:8f:cf:42:6d:0e:20:d9:ab:0e:d2:8f:ad:18:c4:b4:
         d4:b4:9a:17:30:e3:13:76:af:9c:1d:50:05:93:82:b0:a1:5c:
         db:53:0a:94:03:98:5e:a9:c4:b1:6a:97:7f:59:fa:90:9a:c8:
         09:d0:62:2b:8f:06:ea:28:64:51:f9:2f:5a:a8:4a:dc:0b:00:
         e5:57:67:f1:52:d1:b7:fa:8f:61:b3:c6:3f:d2:c4:75:49:37:
         46:d8:7b:63:0d:54:f3:6d:6c:b2:f9:41:7b:33:21:3f:5e:55:
         67:af:a8:e9:bc:08:03:80:03:17:c0:cc:1f:0b:68:46:1e:a2:
         86:08:a2:ae:e7:fc:d3:ce:b1:2e:d2:3b:80:c5:95:43:08:9e:
         e7:00:83:b9:9e:3f:54:41:b3:81:91:3f:ee:2d:d2:c9:c1:7e:
         89:04:dd:5c:c9:13:b7:16:d0:07:68:31:e8:55:2e:4c:a1:af:
         1f:65:c1:ee:c2:c3:f7:e6:b1:1a:df:09:de:28:34:1c:61:eb:
         63:cb:63:10
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBCfm3OHIuY8NilKo3/fbg3oRq2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE0QUMyMEYzOENDQjdFM0U1RTlDODNFNTU0MEQzRDE3
RkNDMDE4NDAeFw0yNTA4MTExMzMwMjZaFw0yNjA4MTAxMzM1MjZaMDMxMTAvBgNV
BAMTKDJDQTlBMTgzMkQ4MDIyQzAwQzY2Mzg5OUMyOTYxQzNDQjYyQkIwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkQMIrAPdNgHpdVo1XD5UmvpK
5OfoGhtF/Gthomrfvq6BYol0W77RNHY+/yv+SE1XpHPpoBkAPl7rkau8g+eEkpRM
8jUf40G2AA+WqiJCFrWxWRz9JM3FHu6zTwhmRP/ukGD1IsO0aIrAhUyQ/jE2CSAk
ySrqhXrIwrM3TkhmncQgmJSk7Dy28cGMXdKgJ8RZWmV7AmtcvMoq7pe3y6SvorYj
oTQ3s+FvABWRxmu3bJEF92OcBbrbjyQdA0C2TdYAAVuhdC8hVB36yU6zl0LEeNTv
hgd/ejSLyxQyCPCNDFKWwJJfs6QMNZAGkk8gT9jgRZs5rGfswnvhCN4431slAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULKmhgy2AIsAMZjiZwpYcPLYrsKMwHwYDVR0j
BBgwFoAUmkrCDzjMt+Pl6cg+VUDT0X/MAYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTI0QjQyOTEwMzU2M0JEMEI3RDI3QTI0NzkzNzg1REQ4
RDE4MzNCMEI0QjBBRTQwQjhBNUY4QzE2MUU5NDdFLzAvOUE0QUMyMEYzOENDQjdF
M0U1RTlDODNFNTU0MEQzRDE3RkNDMDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTRBQzIwRjM4Q0NCN0UzRTVF
OUM4M0U1NTQwRDNEMTdGQ0MwMTg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEyNEI0MjkxMDM1NjNCRDBCN0QyN0EyNDc5Mzc4NUREOEQxODMzQjBC
NEIwQUU0MEI4QTVGOEMxNjFFOTQ3RS8wLzMyMzAzMDJlMzUzOTJlMzEzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM5MzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsg7sDAN
BgkqhkiG9w0BAQsFAAOCAQEAslRbrgaSoJmaMtm4UsdTSoi/8wRxlDqk7cGgVHnS
LBXK5m8ZT96NxFW7E4YqAA3svCD219pn30yPj89CbQ4g2asO0o+tGMS01LSaFzDj
E3avnB1QBZOCsKFc21MKlAOYXqnEsWqXf1n6kJrICdBiK48G6ihkUfkvWqhK3AsA
5Vdn8VLRt/qPYbPGP9LEdUk3Rth7Yw1U821ssvlBezMhP15VZ6+o6bwIA4ADF8DM
HwtoRh6ihgiiruf8086xLtI7gMWVQwie5wCDuZ4/VEGzgZE/7i3SycF+iQTdXMkT
txbQB2gx6FUuTKGvH2XB7sLD9+axGt8J3ig0HGHrY8tjEA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:45:01 2025 by rpki-client